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AMENDMENTS TO THE CLAIMS 
Amended claims follow: 

1. (Currently Amended) A removable physical media bearing a computer program 
operable to control a computer to detect malware by performing the steps of: 

booting said computer with a non-installed operating system read from said 
removable physical media instead of an installed operating system stored on sziid 
computer; 

loading network support code for said computer read from said removable 

physical media; 

downloading from a remote computer one or more malware detection files; 

performing malware detection upon said computer using said one or more 
malware detection files; and 

establishing a secure network connection to said remote computer; 

wherein a firewall computer disposed between said computer and said remote 
computer is operable to block a connection between said computer and said remote 
computer other than said secure network connection; 

wherein said removable physical media is operable such that security 
management code is automatically loaded and run from said removable physical media, 
and said security management code triggers said secure network connection using said 
network support code is used to enable said computer to establish said secure network 
connection from said computer via said firewall computer to said remote compute r via 
said firewall computer . 

2. (Original) A removable physical media as claimed in claim 1, wherein said one or 
more malware detection files include at least one of: 

malware definition data containing data characteristic of malware to be detected; 
a malware detecting engine operable to control said computer to perform said 
malware detection; 

a malware application shell; and 
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malware detection option settings operable to configure optional settings of said 
malware detection. 

3. (Cancelled) 

4. (Cancelled) 

5. (Cancelled) 

6. (Cancelled) 

7. (Original) A removable physical media as claimed in claim 1, wherein said 
removable physical media is one of: 

an optical disk; 

a floppy disk; 

a memory card; and 

a removable disk drive. 

8. (Original) A removable physical media as claimed in claim 1, wherein malware to 
be detected includes one or more of: 

a computer virus; 

a computer Trojan; 

a computer worm; 

a banned computer application; 

a data file associated with a malware file; and 

configuration settings of said computer associated with a malware file. 
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9. (Currently Amended) A method of detecting malware upon a computer, said 
method comprising: 

booting said computer with a non-installed operating system read from a 
removable physical media instead of an installed operating system stored on said 
computer; 

loading network support code for said computer read from said removable 
physical media; 

downloading from a remote computer one or more malware detection files; 

performing malware detection upon said computer using said one or more 
malware detection files; and 

establishing a secure network connection to said remote computer; 

wherein a firewall disposed between said computer and said remote computer is 
operable to block a connection between said computer and said remote computer other 
than said secure network connection; 

wherein security management code is automatically loaded and run from said 
removable physical media, and said security management code triggers said secure 
network connection using said network support code is used to enable said computer to 
establish said secure network connectio n from said computer via said firewall to said 
remote compute r via said firewall . 

10. (Original) A method as claimed in claim 9, wherein said one or more malware 
detection files include at least one of: 

malware definition data containing data characteristic of malware to be detected; 
a malware detecting engine operable to control said computer to perform said 
malware detection; 

a malware application shell; and 

malware detection option settings operable to configure optional settings of said 
malware detection. 



11. (Cancelled) 
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12. (Cancelled) 

13. (Cancelled) 

14. (Cancelled) 

15. (Original) A method as claimed in claim 9, wherein said removable physical 
media is one of: 

an optical disk; 

a floppy disk; 

a memory card; and 

a removable disk drive. 

16. (Original) A method as claimed in claim 9, wherein malware to be detected 
includes one or more of: 

a computer virus; 

a computer Trojan; 

a computer worm; 

a banned computer application; 

a data file associated with a malware file; and 

configuration settings of said computer associated with a malware file. 

17. (Currently Amended) A computer operable to detect malware upon said 
computer, said computer comprising a processor configured to perform the steps of: 

booting said computer with a non-installed operating system read from a 
removable physical media instead of an installed operating system stored on said 
computer; 

loading network support code for said computer read from said removable 
physical media; 

downloading from a remote computer one or more malware detection files; 
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performing malware detection upon said computer using said one or more 
malware detection files; and 

establishing a secure network connection to said remote computer; 

wherein a firewall computer disposed between said computer and said remote 
computer is operable to block a connection between said computer £ind said remote 
computer other than said secure network connection; 

wherein said computer is operable such that security management code is 
automatically loaded and run from said removable physical media, and said security 
management code triggers said secure network connection using said network support 
code is used to enable said computer to establish said secure network connection from 
said computer via said firewall computer to said remote compute r via said firewall 



18. (Original) A computer as claimed in claim 17, wherein said one or more malware 
detection files include at least one of: 

malware definition data containing data characteristic of malware to be detected; 

a malware detecting engine operable to control said computer to perform said 
malware detection; 

a malware application shell; and 

malware detection option settings operable to configure optional settings of said 
malware detection. 



computer . 



19. 



(Cancelled) 



20. 



(Cancelled) 



21. 



(Cancelled) 



22. 



(Cancelled) 
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23. (Original) A computer as claimed in claim 17, wherein said removable physical 
media is one of: 

an optical disk; 

a floppy disk; 

a memory card; and 

a removable disk drive. 

24. (Original) A computer as claimed in claim 17, wherein malware to be detected 
includes one or more of: 

a computer vims; 

a computer Trojan; 

a computer worm; 

a banned computer application; 

a data file associated with a malware file; and 

configuration settings of said computer associated with a malware file. 

25. (Currently Amended) A server computer connected by a network link to a 
computer detecting malware upon said computer, said server computer comprising a 
processor configured to perform the steps of: 

establishing a secure network connection to said computer; and 

loading one or more malware detection files to said computer; 

wherein a firewall disposed between said computer and said server computer is 
operable to block a connection between said computer and said server computer other 
than said secure network connection; 

wherein said computer is operable such that said computer is booted with a non- 
installed operating system read from a removable physical media instead of an installed 
operating system stored on said computer; 

wherein said computer is operable such that network support code is loaded for 
said computer read from said removable physical media; 

wherein said computer is operable such that security management code is 
automatically loaded and run from said removable physical media, and said security 
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management code triggers said secure network connection using said network support 
code is used to enable said computer to establish said secure network connection from 
said computer via said firewall to said sei-ver compute r via said firewall ; 

wherein malware detection is performed upon said computer using said one or 
more malware detection files. 

26. (Previously Presented) A removable physical media as claimed in cMm 1, 
wherein said computer is configured in its BIOS settings to boot from said removable 
physical media. 

27. (Previously Presented) A removable physical media as claimed in claim 1, 
wherein booting said computer with said non-installed operating system read from said 
removable physical media is based on a determination that a bootable removable media is 
present. 

28. (Previously Presented) A removable physical media as claimed in claim 1, 
wherein said remote computer determines said one or more malware detection files that 
are downloaded to said computer. 

29. (Previously Presented) A removable physical media as claimed in claim 28, 
wherein said one or more malware detection files are determined based on said non- 
installed operating system. 

30. (Previously Presented) A removable physical media as claimed in claim 28, 
wherein said one or more malware detection files are determined based on a malware 
detection product. 

3 1 . (Previously Presented) A removable physical media as claimed in claim 1 , 
wherein said remote computer logs said downloading of said one or more malware 
detection files by said computer. 
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32. (New) A removable physical media as claimed in claim 1, wherein said security 
management code uses said triggered secure network connection to download said one or 
more malware detection files from said remote computer. 



